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SECTION I --- ABSTRACT 


This paper presents precise versions of some “laws” that must be satisfied by computations involving 
communicating parallel processes. The laws take the form of stating plausible restrictions on the 
histories of computations that are physically realizable. The laws are very general in that they are 
obeyed by parallel processes executing on a time varying number of distributed physical processors. For 
example, some of the processors might be in orbiting satellites. The laws are justified by appeal to 
physical intuition and are to be regarded as falsifiable assertions about the kinds of computations that 
occur in nature rather than as proved theorems in mathematics. The laws are intended to be used to 
analyze the mechanisms by which multiple processes can ccadaliaalianal to work effectively together to _ 
solve difficult problems. 


The laws presented in this paper are intended to be applied to the design and analysis of systems. 
consisting of large numbers of physical processors. The development of such systems is becoming 
economical because of rapid progress in the development of large scale integrated circuits. 


We generalize the usual notion of the history of a computation as a sequence of events to the notion of 
a partial order of events. Partial orders of events seem better suited to expressing the causality 
involved in parallel computations than totally ordered sequences of events obtained by “considering all 
shuffles” of the elementary steps of the various parallel processes (21,22). The utility of partial orders is 
demonstrated by using them to express our laws for distributed computation. These laws in turn can be 
used to prove the usual induction rules for proving properties of procedures. They can also be used to 
derive the continuity criterion. for graphs of functions studied in the Scott-Strachey model of 
computation. The graph of a function is simply the set of all input output pairs for the function. We 
can prove that the graph of any physically realizable procedure p that behaves like a mathematical 
function is the limit of a continuous functional F such that 


sraphip) = Un Fit} 


In other words the graph of p is the limit of the n-fold compositions of F with itself beginning with the 
empty graph. 
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SECTION II_ --- INTRODUCTION 


In programming languages such as SIMULA-67 [17], SMALLTALK [18], and CLU [20], the emphasis 
has changed (compared to Algol-60) from that of procedures acting on passive data to that of active 
data processing messages. The actor model is.a formalization of these ideas that is independent of any 
particular programming language. Instances of SIMULA and SMALLTALK classes and CLU clusters 
are actors. However, actors have been designed to include the added effects of parallelism so that 
instances of monitors[(42,41), envelopes{43], and serializers[34] are also actors. 


The actor message passing theory can be used to model networks of communicating processes which 
may be as close together as on the same LSI chip or as far apart as on different planets. It can be used 
to model processes which communicate via shared memoryll2], packet-switched | pervert. 24], 
ring-networks[23], boolean n-cube networks[44], or Batcher sorting nets{25]. 


SECTION III --- ACTORS and EVENTS 


The theory presented in this paper attempts to characterize the behavior of procedural objects called 

actors [active objects] in parallel processing systems. Actors and events are the fundamental concepts in 

the theory. Actors interact with each other through one actor sending a messenger to another actor 

called the target. The arrival of a messenger at a target is an event, and these events are the basic 

steps'in this madel of computation. A key point in the actor model of computation is that messengers 

are themselves actors. The actor model is therefore an un-typed theory which is a generalization of the 
A-calculus of Church. 


Actors can be created by another actor as part of the second actor's behavior. Indeed, almost every 
messenger is newly created before being sent to a target actor. 


Events mark the steps in actor computations; they are the fundamental interactions of actor theory. 
Each event is instantaneous and indivisible taking no duration ‘in time. Every event E consists of the 
arrival of a messenger actor, called messenger(E), at a target actor, called target(E). 


We will often use the notation: 
E: [T <~ MJ 
to indicate that E has messenger M and target T. 
The time of an event is the arrival of the messenger of the event ates than the sending of the 
messenger because a messenger cannot affect the behavior of another actor until that actor receives it. 


If the sender wishes a reply, an actor (called the continuation) to whom any reply should be sent should 
also be carried by (as a component of) the messenger. 


Intuitively, the arrival of the messenger M at the target T makes M's information available to the target 
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for the purpose of activating additional events. The arrival of M at T does not in itself cause any 
change to either M or T. 


For each event E we define acquaintancese(T) and acquaintencese(M) to be the vector of immediate 
acquaintances of T and M, respectively. The immediate acquaintances of an actor x are the other actors 
x directly “knows about” at a given instant. ‘The relation is asymmetric in the sense that it is possible 
for an actor x to know about an actor y without it being the case that y knows about x. An actor may or 
may not "know about” itself; if it does, it can directly send ca! messages! 


Law of Finite Acquaintances: For all actors x end events E such that x is the target or messenger of E, 
the vector acquaintancese(x) has finite length. 


The above law states that an object can only be directly connected to finitely many other ob jects. 


All of the actors which are definable within the lambda calculus of Church have the property that their 
acquaintances cannot change with time; ie. if x is defined by a lambda expression, then for all events 
Ey and E2 in which x is the target or. messenger, it will be the case that 


acquaintancese 4 (x) = acquaintances, 2 (x) 


In order to implement interprocess communication between parallel processors it is necessary to use 
actors whose vector of acquaintances changes.over time. The purpose of this paper is to axiomatize the 
fundamental laws which govern the behavior of such actors. 


An important example of an actor whose immediate acquaintances change with time is a cell. A cell is 
an actor which at any given time has exactly one immediate acquaintance--its contents. When the cell 
is sent a messenger which consists of the message, “what is your contents?", and a continuation--another 
actor which will receive the contents--the cell is guaranteed to deliver its contents to that continuation 
(while also continuing to remember them). All this might be very boring if the contents of the cell were 
constant. However, upen arrival of a messenger which has the message “update your contents to be x" 

and a continuation, the cell is guaranteed to update its contents to be the actor x {whatever that may be) 
and inform the continuation that the update has been performed. The behavior of cells will be 
axtomatized later in this paper after we have presented enough of the actor model to make this 
possible. 


The target(E) and the messenger(E) and their immediate acquaintances will be called. (immediate) 
participants of an event E. The immediate participants of an event are exactly those actors which can 
be accessed without sending any messages. 
participants(E) = {target(E), messenger(E)} U acquaintencese(target(E)) U acquaintances; (messenger(E)) 
Finite Interaction Law: For each event E, the immediate participants in E are finite. 


The above law, which is intended to capture the physical intuition that only finitely many objects can 
interact in a single event, is an immediate corollary of the Law of Finite Acquaintances. 
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SECTION IV_--- PARTIAL ORDERINGS on EVENTS 


In order to develop a useful model of parallel computation, we have found it desirable to generalize the 
usual notion of the history of a computation as a sequence of events. In this paper a history of a 
computation will be expressed as a partial order which. records the causal and incidental relations 
between events. The partial orders constrain the maximum amount of parallelism that can be used in 
an implementation. Any two events which are unordered can be executed concurrently using separate 
_ processors. However, there is no requirement that an implementation do this. Events can be executed 
in any time sequence that is consistent with the partial order. 


Iv. -- ACTIVATION ORDERING 


One important strict partial ordering on events in the history of a computation is derived from how 
events activate one another. Suppose an actor x, receives a messenger m, in an event Ey and as a 
result sends a messenger m2 to another actor xo. Then the event Eo, which is the arrival of the 
messenger mo at Xo, is said to be activated by Ey. We call the transitive closure of this “activates” 
relation the activation ordering and if Ey precedes Ea in this ordering then we write: 


Ey -act=> Eo 


In general -act-> is only a partial ordering because an event E ‘might activate several distinct events 
E,....E,, thereby causing a “fork”. 


IV.La_ --- Primitive Actors 


Labeled sequences are one of the most important kinds of primitive actors. An example of a labeled 
sequence is [real: 3, imaginary: x] which is a sequence with two acquaintances 3 and x which are labeled 
real: and imaginary: respectively. We allow labeled sequences with numerical labels to be abbreviated 

using positional notation so that [1: 3, 2: y] can be abbreviated as [3 y]. ; 


A simple example which illustrates the use of -act-> is a computation in which integers 3 and 4 are 
added to produce 7. We suppose the existence of a primitive actor called + which takes in pairs of 
numbers and produces the sum. In this case + receives a messenger of the following form: 


[request: [3 4], repls-to: ¢] 
which specifies that the message in the request is the argument tuple [3 4] and the reply which is the 


sum should be sent to the continuation ¢ when it has been computed. Thus the history of the 
computation contains two events: 
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la request event with target + and messenger that specif ies the numbers to be ewaded and 
an actor ¢ to which the sum should be sent; 


2: a.reply event with target ¢ and messenger that specifies the sum of the numbers. 
These two events are related as follows in the activation ordering: 
[+ <~~ [request: [3 4], reply-to: c]] 
act 
| 
V , 5 
[¢ <~ [reply: 7] 
The activation ordering can be used to define the notion of a simple primitive actor as follows: 
Detinition: An actor x will be said to be a simple! primitive actor if whenever an event E, of the form 
Ex: [x <~ [request: m, reply-se: eJ] 
appears in the history of a computation then there is a unique event E> of the form 
Eat Le com [reply I] 


such that E; -act-> Ey and there are no events E such that Ey -ect-> E -act-> E>. Simple primitive actors 
are one-in one-out procedures. 


Complaint processing can easily be incorporated into the scheme. The history that results from 
divide(3 0] which attempts to divide 3 by 0 is shown below: 


[divide <~~ [request: [3 0}, errs cJ] 


act 


| 
V 


[Lc <~~ [complaint: (xere-divide: 3) ]] 


Since complaint processing does not have any profound implications for the results in this paper, we 
will not say anything more about the matter. 


ee a a A I He a NR = 


1: Later in this 5 paper we will see examples of primitive actors such as fork end join primitives which are not 
imple. 
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The history of the computation of tactorial[3) using an iterative , implementation of factorie! illustrates 
how the activation ordering can be used to‘ illustrate aaa of contro! structures: We will suppose 
that factorial knows about an actor called loop which is sent tuples of the form [index product] where the 
initial index is 3 and the initial preduct is 1. Whenever loop receives a tuple [index product], where index 
is not 1, then it sends itself the tuple ((index - 1) (index * product))}. 


[ factorial <~~ (request: [3], reply-to: eJ] 


act 


| 
V 


[loop <~~ (request: [3 1), reply-to: ej] 


act 


| 
V 


[loop <~~ [request: [2 3], reply-to: c]] 
| : 


act 


| 
[loop <~~ [request: [1 6], reply-to: c]]} 
| a 


act 


| 
V 


[Le <~~ [reply: 6]] 


The actor loop is iterative because it only requires the amount of working store? needed to store the 
index and product. Note that only one reply is sent to the continuation ¢ even though ¢ appears as the 
continuation in several request events. 


IV.1.b --- Laws for the Activation Ordering 


It is not possible for there to be an infinite number of events in a chain® of activation between two 
given events in the activation ordering of the history of a computation. This law implies: the existence 
of primitive actors. Stated more formally, 


Law of Finite Activation Chains between two Events: If C is e chain of events in the activation ordering from 
E, to Eo, then C is finite. 


2: The ‘careful treatment of the storage rendre: for. this example is given in [26]. 


3: A chain is a totally ordered sequence of events 
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The law of finite activation chains between events is intended to express the fact that “Zeno 
machines"--i.e. machines which compute infinitely fast--cannot be physically constructed. For example, 
consider a computer with your favorite instruction set which executes its first instruction in 1 
microsecond, its second in 1/2 microsecond, its third in 1/4 microsecond, and so on. This machine not 
only could compute everything normally computable in less than 2 microseconds, but could also solve the 
“halting problem". It could do this by simulating a normal computer running on some input, and if the 
simulation were still running after 2 microseconds, it could conclude that the simulated machine does 
not halt on that input. 


Intuitively each event can directly activate only a finite number of other events. The events directly 
activated by an event E are called immediate successors of E (under the activation ordering -act->). The 
immediate successor set of E in the aor icin written immediste-succ....,-)(E), can be defined 
formally: 


immediate-succ_, ..-»(E) ® {E,| E -ace-> Ey and JE, ‘such that E -act-> E> ~act-> E}} 
Then we have the following law: 


Law of Finite Immediate Successors in the ‘Activation dering: 
For all events E, the set immediate~succ_.._,..)(E) is finite. 


We define immediate predecessors in the activation ordering in a manner similar to that used for 
immediate successors. We postulate that an event is either an initial event, in which case it has no 
predecessors, or it is activated by a unique predecessor event. 


Law of Uniqueness of Immediate Predecessers in the Activation Ordering: 
For all events E, the set immediste~pred_,.,.){E) has at most one element 


This law is based on the physical intuition that two distinct events cannot both be the immediate cause 
of another event. This is because an event which immediately activates another event must have been 
the sender of the messenger for that second event. Thus each event E has at most one activator? 
which if it exists will be denoted as activator(E). 


Note that the activation ordering analyzes the causality of the classical "fork- join” structure of parallel 
computations in an asymmetric manner. The reason is that the last event to arrive at the join is the one 
which activates the remainder of the computation. Later in this paper we will introduce another partial 
order on events [called the continuation order) which treats “fork- join” control structures in a symmetric 
fashion. 


ne te nN EN ee = 


4: This usage of the term “activator” is somewhat in conflict with the usage of the term in Greif and 
Hewitt[40]. The usage here has the advantage that it is more firmly grounded in the physics of 
computation. 
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IV2 -- ARRIVAL ORDERINGS 


Intuitively, the activation ordering can be identified with “causality” in which each event is “caused” by 
its activator. However, the activation ordering is not enough to specify the actions of actors with 
“side-ef fects", such as cells. For this reason, we introduce the arrival ordering -arr->, for an actor x 
whose behavior depends on the order of arrival-of the messengers sent to x. The physical basis for 
defining the order of arrival is a hardware device called an arbiter. Note that there are only a few 
primitive actors such as cells and synchronization primitives whose behavior actually depends on the 
order in which messengers arrive. Such actors are called order dependent. All other actors are order 
independent and do not need to use an arbiter since ~ can be freely copied to make as many 
instances as desired. 


Due to the totality of the order of arrival of messengers at an order dependent actor x (which will be 
discussed in more detail below), the notion of a “local time" for x is well-defined. Therefore, when 
talking about a single actor, we can talk rigorously about the changes in its vector of acquaintances over 
time. 


1V.2.a --- Laws for Arrival Orderings 


The arrival ordering for each order dependent actor x is required to be a total ordering on all events 
which have x as their target. This policy is enforced by arbitration in actors such as synchronization 
primitives which need to observe the order in which their messages arrive. 


Arrival Ordering Law: If E,#E> end target(E, starget(E>)ax, 
then sdisirse Ey warr->, Eo or Eo ~arr->, Ey 


This law says that the messenger of E, arrives at x before the messenger of F2 or vice-versa. The 
arrival ordering is defined by the arbiter for x. 


Note in connection with arrival orderings that there is no necessary relation between the arrivals of two 
messengers at a target and the ordering of their activator events. Suppose that events E, and Ez have 
the same target x. Then, in general, the circumstance that E, -arr->, E2 does not imply that 
E, -act-> Eg since Ey and Ey might be distinct events of two asynchronous processes that both happen 
to send messengers to the same actor. Furthermore, the fact that. activator(E,) -ect-> activator(E2) is no 
guarantee that E; -arr->, Eo; ie. the menees of E> might still arrive at the target actor before. the 
messenger of Ey. 


Each actor is created at some point in time. This fact is embodied in the following law: 


Law of Finite Predecessors in sn arrival ordering: 
For all events E’ 


{E] E “arr~>target(E") E’} is finite. 
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Given an event E, of the form [T <~~ My] and an event E of the form [T «~~ Ma], there are only a 
finite number of events between these two events in the arrival ordering -arr->7. Stated more formally: 


’ Corollary: Law of Finite Chains between two Events in en Arrival Ordering: 
For all events E; and E> such that terget(E,) = terget(E2) = x, 
{E] Ey -arr->, E -arr->, Eo} is f inite. 


The above law implies that anomalous behavior like the following is not physicaly realizable: a cell 
receives the infinite sequence of “store” messages: (store: 1], [stere: 1/2], [store: 1/4}, [store: 1/8}, etc. and 
then receiving a “contents?” message. What is it to reply? Zero? But zero was never explicitly stored 
into the cell! , 


The law of Finite Chains in the Arrival Ordering allows us to define immediate predecessors and 
immediate’ successors for the arrival ordering in a manner similar to the one used for the activation 
ordering. It guarantee that the arrival ordering for each actor is total over its domain, successors and 
predecessors are unique when ibe exist. If an-event E has an immediate predecessor in “arr->+ er get(E) 
then it will be called the precursor of E and will be denoted by precursor(E). The law guarantees that 
the process of repeatedly taking he ee of an event with target t will find the creation event for t 
in a finite number of steps. 


SECTION V_---_ CREATION of ACTORS 


The actor message passing model differs from most other theories of computation in that it explicitly 
deals with the issues involved in creating new ob jects. 


Intuitively the creation of an actor x must precede any use of x. In order to precisely state the above 
intuition as a law we must be more precise about when actors are created. For each actor x which is 
created in the course of a computation, we shall require that there is a vets event creation(x) which 
caused x to be created. 


Let created(E) be the set (possibly empty) of actors created by the event E--i.e. the set of actors which 
claim E as their creation event. Note that x is not a participant in creation(x) because x does not come 


into existence until after creation(x) has occurred. 


Definition: created(E) & {x] creation(x)<E} 


The intuition that a single event can only create finitely many objects is formalized as follows: 
Law of Finite Creation: For each event E, created(E) is finite. 


Note that the elements of created(E) might be mutual acquaintances of one another and that mutually 
recursive procedures can be created.in this way. 


ACTORS Hewitt and Baker 
SECTION VI_--- CHLLS 


Vii --- Axiom for Cells 


The axiom for cells has two parts: involving their creation and use which can be stated as follows: 


Creation: There is a simple primitive actor, called. create-cell, such that 
whenever it is sent a tuple of the form {i}, it creates an actor s which is a new 
-Storage cell with initial contents the actor i. More formally, for each event E; 
of the. form Ey: [create-cell <~ [request: [i], reply-to: ¢J]J there is a unique 
event E2 of the form Eo: [ec <~~ [reply: s]J such that s is a newly created 
simple primitive actor and E, = ectivator(E>). Furthermore created(E,) = {s} . 
which says that the only acter created by the event E; is the storage cell s 
Thus each storage cell that is returned by creste-cell differs from all previously 
created cells. The storage cell s always has exactly one acquaintance which is 
initially i. If E is an event which has s as its target, we will use the notation 
contents¢(s) to denote this acquaintance at the time of the event E. _ 


Use: A storage cell s can only be sent messages of the form [contents?] which 
requests the “current” contents and [updase: x] which updates the contents to be 
% 


| 
The contents of s when it receives one of these messages in an event E can be 
axiomatized using the arrival ordering for s as follows: 


contentse(s) = 
if E has an immediate predecessor in the arrival ordering jae 8 
then 
if precursor(E) is of the form Cs <ww [request: {update: x}, reply-to: ...J]] 
then x 
else, contents, -scursor(E)'*) 
else i which is the actor sent to create-cell to create & 


If E is an event of the form [[s <~~ [request: (contents?) reply-to: c]] then there 
is‘a unique event E’ of the form E': [c <~~ [reply: contentse(s)J]J such that 
E = activator(E’). 
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vi2 -- Busy Waiting 


Busy waiting is the kind of waiting used in some multi-processing systems. In this kind of waiting, the 
contents of a cell is continually checked and, if tt is unchanged, the processor branches back to check it 
again. This kind of waiting is used when one processor cannot depend upon another to “wake it up” 
when the contents change. Busy waiting depends upon the property of Finite Chains between Events in 
the arrival orderings of cells. 


For example suppose that a new storage cell s is created whose initial contents are 0. Furthermore 
suppose that the contents of s are updated exactly once by a process which sends s the message 
[undate: 1]. Now another process might busy wait until the contents of the cell ¢ change to 1 by 
executing a procedure of the following form: 


loop: if contents(s).= 0 
then goto loop 
else ...proceed... 


The property of Finite Chains between Events in the arrival ordering for s, guarantees that the code 
proceed... will eventually be executed since otherwise there would be an infinite number of “contents? 
messages before the [update: 1] message in the arrival ordering of s. 


The use of the arrival ordering in the actor model of computation seems to help overcome one of the 
ma jor limitations of other theories of the semantics of communicating parallel processes based on the 
Scott-Strachey model of computation [5,6]. The Scott-Strachey model is a deep mathematical study of 
functions that are minimal fixed points of “continuous” functionals. As currently developed the 
Scott-Strachey model seems to be a special case of the actor model in that it only deals with actors which 
behave like mathematical functions to the exclusion of actors such as cells and synchronization 
primitives whose behavior depends on the arrival ordering of messages sent to the actor. 


SECTION VII_--- LAWS of LOCALITY 


We would like to formalize the physical intuition that computation is local and there can be no “action 
at a distance”. The laws of locality presented in this section are intended to capture these intuitions. 


The initial acquaintances of an actor are a subset of the participants in its creation event and the actors 
created by its creation event: 


Initial Acquaintances Law: If an actor z is the terget of an event E 
such that E is the first event in the arrival ordering of z then, 


necpintencone () ¢ participants(crestion(z)) U created(erestion(z)) 


The acquaintances of an actor can increase over its previous acquaintances only by the acquaintances of 
the messengers which it receives and the actors which it creates. 
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Precursor Acquaintances Law: If an actor z is the target of an event E 
such that E has a precursor in the arrival ordering oz then, 
acquaintancese(z) ¢ participants(precursor(E)) U created(precursor(E)) 


An actor x can only be the target or messenger in an event E if x is newly created or is an immediate 
participant in activator(E). 


Activator Acquaintances Law: For each event E which is not an initial event 
target(E) € participants(activator(E)) U created(activator(E)) 
messenger(E) € participants (activator(E)) U Patediactivator(E)) 


These laws of locality can be used as the foundation on which to build theories of information fiow in 
computer systems. Using the formalism, a theory can be developed to show how the imposition of 
initial constraints can be used to eliminate undesirable information paths. In this way, protection 
problems, such as the Confinement Problem may be solved. The actor message passing model can be 
used as the foundation for formalisms (such as Strong Dependency [45}) for describing information 
transmission in computational systems and for proving that information is not transmitted over certain 
paths. 


SECTION VIII_--- COMBINED ORDERING 


To make sense out of the activation and arrival orderings, and to relate them to a notion of “time”, .we 
introduce the precedes s relation "==>": 


Definition: --> is a binary relation on events which is the transitive closure of the union of the 
activation ordering -act-> and the arrival orderings -arr->, for every actor x. 


In order for --> to function as a notion of precedence, we require that the activation and arrival 
orderings be consistent. This is guaranteed by the Law of Strict Causality for actor systems which 
States that there are no cycles allowed in causal chains; ie. it is never the case that there is an event E in 
the history of an actor system which precedes itself. Stated more formally the law of causality is that 
the combined ordering is also a strict partial ordering: 


Law of Strict Causality: For no event E does E --> E. 


Suppose that we have events in a computation described as follows: 
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Ej: [x «~~ mJ 
Eo: Ly <-~ mo] 
E3: Ly <-~ m3] 
Eg: [x <~~ ma] 


Ey -act-> Eg ;arrival of my at x causes the arrival of mo at y 
Es marry Ez 3mo arrives at y before m3. 

E3 -act-> Eg ;arrival of mg at y causes the arrival of mg at x 
Eq -arr->, Ey sma arrives at x before my 


The Law of Strict Causality states that the history of the computation given above is physically 
impossible to realize even though it is locally reasonable in the sense that any proper subset of the 
orderings can be realized. The above example of an impossible computation is due to Guy Steele. 


Now we can defi ine immediate predecessors and successors of an event E under -->. Note that an event 
E of the form [t <~~ mJ] has at most two immediate predecessors in the relation --> one of which is the 
activator of E and the other is the precursor of E in the arrival ordering -arr->;. 


We would like to formalize the intuition, that between any two events which are causally related, that 
there are only finitely many events in a causal chain that connects the events. This intuition is 
formalized in the following law: 


The Law of Finite Chains between events in the Combi Orderi 
There are no infinite chains of events between two events in the an partial wedoring -->. 


Actually we can express a much stronger property: about the activity that can occur between two events: 


Corollary: Law of Finitely Many Events between two events in the Combined Ordering: 
For all event E, and Eo the set {Ej E, --> E --> Eo} is finite. 


The above law is easily proved using Konig’s Infinity Lemma and the law that there are no infinite 
chains between two events. Note that the Law of Finite Chains between two Events in the Activation 
Ordering and any Arrival Ordering are immediate corollaries of the above law. 


The above law has important consequences for models of actor systems. It implies that for each history 
of a computation that there. exist “time” functions that map events onto integers. In general there are 
many time functions that correspond to one history which are obtained by considering all the possible 
total orders that observers might see. Such time functions have the following properties: 


aay ees ee 


5: This law is a strict generelization of the other laws in this paper. We originally conjectured that it could be 
proved using the Laws of Locality together with the rest of the laws. However Will Clinger [47] found a 
counterexample. Subsequently Valdis Berzins [48] independently found s very beautiful symmetric form of the 
counterexample as the solution to a class exercise in MIT class 6.835. 
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VE, Ep if Ey --> Ep then time(E) < time(E) 
VE, Ep if time(E, )stime(Ea) then Ey=EQ 


We can use the combined ordering ==> to express an important law about created actors. 
Law of Creation before Use: 


If an actor x is created in the course of a computation and E is an event with participant x then 
creation(x) ~-> E 


Vill! -- NESTED ACTIVITIES 


Since one of the aims of actor theory is to study patterns of passing messages, we must identify several 
common patterns. The two most common types of messengers are requests and replies to requests. A 
request has two acquaintances: the request message itself, and a continuation actor which is to receive 
the reply. A reply to a request consists of a message sent to the continuation; this reply usually contains 
an answer to the request, but may contain a complaint or excuse for why an answer is not forthcoming. 


We define the nested activity corresponding to a request event RQ in a computation to be the set of 
events which follow RQ in the combined order but precede any reply RP to the request. More formally, 
let E--2 denote the set of events which follow E (including E itself) and --2E denote the set of events 
which precede E (including E) in. the computation. In other words 


E--> = {E"| EmE’ or E --> £"} 
“-2E & {E’] ExE’ or E’ --> E} 


Definition: . 
If an event E is of the form [[... <«~ [request: ... reply-to: ¢]] then any event E’ of the form 
[e <«~ [reply: ...J] such that E -ect-> E’ will be said to be a reply to E. 


We can now define an activity to be a set of events as follows: 
activity(RQ) = RQ=-2 fl Uf--2RP | RP is « reply to RO} 


Activities embody the notion of the nesting of activities that is produced by conventional programming 
_ languages, since we only include those events in an activity which contribute to a reply to that request. 
Note that if no reply is ever made to the request RQ in the computation, then the activity corresponding 
to RQ is incomplete and therefore vacuous: 


If we let concurrent activities be those whose request events are unordered, then concurrent activities may 
overlap--i.e. share some events. However, this can only happen if the activities involve some shared 
actor which is called upon by both; if two concurrent activities involve only “pure” actors which by 
definition have no arrival ordering and can be freely copied to avoid arbitration bottlenecks, then 
activities are properly nested, meaning that two activities are either disjoint, or one is a subset of the 
other. 
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The notion of activities allows one to vary the level of detail in using actors to model a real system. Let 
us define a primitive activity as the activity of a request which activates exactly one immediate reply, 
with no events intervening. Thus, a primitive activity always consists of exactly two events. A crude 
model for a system might. represent an actor as primitive, i.e. one whose receipt events are all primitive. 
However, at a finer level of detail, one might model the internal workings of the actor as an activity in 
which a group of “sub”-actors participate. 


SECTION IX --- CONTINUATION ORDERING 


The notion of nested activities can be used to help explicate several of the various notions of “process” 
that have been used in computer science. In particular it can be used to define an ordering on events 
that is important to defining the semantics of programming languages for parallel processing. This 
new ordering is the continuation order and will be denoted by -cent->. The continuation ordering is 
important because it captures the usual operating system notion of “process” in terms of partial orders 
on events. Later in this paper. we will show how to use the continuation ordering to provide a precise 
characterization of the relationship between the Scott-Strachey model and the actor message-passing 
model. 


Definition: If E and E’ are events then E -cont=> E' if 
1: There is some activity a such that E, E’ ¢€ a 
and 
2: E ==> —’ 


Note that each event has only finitely many predecessors and finitely many immediate successors in the 
continuation ordering because -cont-> is a sub-ordering of -->. 


IX1 --- Fork-Join Behavior 


In programming languages for parallel processing, it is quite common to provide primitives by which 
processing can “fork” creating more parallelism which can later join together. Parallel evaluation of the 
arguments of a procedure provides a good example of fork-join behavior. All fork-join primitives have 
basically the same structure. Consider for example, the behavior of a procedure f which computes 
(x2 + y2) given arguments x and y. Below are the two possible histories for an activity of f which 
produces these results where --> is used for the combined ordering: 
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Ey: [ft <«~ [request: [x y}, reply-to: ce] 
7 


sannnnan act--<-----—---- 
| | 
V V 
Eo: [* <~~ [request: [x x], reply-to: ¢]] Eg: [ <o~ [request: [y y], reply-to: co)] 
act act 
| | | 
V V 
Eq: [ey <«~ [reply: x?]]] 
| 


Eg: Leg <o~ [reply: y? I] 
| 


weewece= aCtqr------ 
| ‘| 
V V 
Eg: [+ <o~ [request: [x y2J, reply-to: c]] 
| 
act 
| 
V 


Ey: [Le <~~ [reply: (x? + y4)7] 
Note that in the history given above that Es -act-> Eg whereas in the history given below that 
Eq =act=> Eg. 


Ey: [ f <~~ [requese: {x y], reply-to: c]] 


were n nnn ACtwm nnn nn nen aC toe ene 
| | 
V V 
Eo: [* <~~ [request: [x x], reply-to: ¢,]] Eg: [* <o~ [request: [y y], reply-to: co] 
act act 
: 
V V 
Eq: [ey <~~ [reply: x2]]) Es: [eg <~~ [reply: y* 
| 
coleattentand act------ weer e nee en nwnenn= 
| | 
V 


Eg: [ +-<~~ [request: [x2 y*), reply-to: ¢]]J 


act 


| 
V 


E7: [e (ww [reply: (x? + yy 


15 
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We shall say that E, is a fork event and that Eg is a join event. In the above computation it will 
necessarily be the case that'E; -act-> Eg since this is the only way that Eg can be activated. Therefore it 
will be the case that either Eg -act-> Eg or Ex -act-> Eg. The continuation ordering -cont-> enables us 
to present the history of the computation without having to be concerned as to «hich of the above 
possibilities actually occured. Using the continuation ordering the symmetry of the above fork- join 
computation is demonstrated by the fact that the Continuation eae is the same for both of the 
above histories: 


E,: [f <+~ [request: [x y], reply-to: c]]J 


aieatetestatetetaanad CONtem---2--  --------COont------ <== 
| | 
V 2 ] 
Eg: [* <~~ [request: [x x], reply-to: ¢,]] Eg: [[& <o~ [request: [y y], reply-to: co]] 
| | 
- cont cont 
Hs, | 
V : V 
E4: [eq <o~ [reply: x2J] ES: [eo <o~ [reply: y*70 
| 
----cont------ ~------ cont-------- 
| | | 
V r: 
EG: [[ + <~ (request: [x* y2], reply-te: c]] 
| 
cont 
| 
V 


E7: [Lc <~~ [reply: (x? + y 


IX.2_ --- Synchronization Between Processes 


The behavior of semaphores provides a simple example to illustrate the relationship between the 
activation and continuation orderings. Suppose that s is a newly created semaphore whose capacity 
(count) is initially 0 so that the first attempt to perform a P operation will wait until a V operation is 
performed on the semaphore. In order to model the behavior of semaphores using message passing, we 
will suppose that P and V operations are implemented by sending [P:] and [V:} requests respectively. 
Suppose that Ep, is the first event in the arrival ordering of s in which s receives a [P:] request and E, 
is the next event in which s receives a [V:] request. The activation and continuation relations between 
these events is shown below: 
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E,: [s <«~ [request: [P:], reply-to: ¢,]] 


cont 
V 
Ez: [ey <~~ (reply: ...]] . <-act- Ey: [8 <w~ [request: [V:], reply-to: co) ]) 
cont 
Y 


Lc. «wo [r eply: a F| 


Note that E, <=> E since E, -act-> E but it is not the case that E, ~cont-> E because there is no activity in 
which they are both elements. 


SECTION X_---_ PROCEDURES 


X.1_ --- Behavior of Procedures 


In this section we would like to characterize the behaviors of actors which behave like procedures. In 
order to do this we would like to use the notion of an activity. 


To make our discussion more concrete we will consider the behavior of an implementation of the 
Fibonacci function defined as follows: 


(fib n) = 
if 
(n= 1) then 1 
(n = 2) then 1 
(n> 2) then ((fib (n = 1)) + (fib (n = 2)))) 


The following history is a partial order of some of the events that might result from evaluating (fib 4). 


ACTORS . Hewitt end Beker is 


E,: [fib divas (request: [4], reply-to: cJ]} 


alten teat CONtem------ 0 een -- CON te eee 
| | 
hi? | 
V Nv 
Ea: [fib <~~ (request: [3], reply-to: ¢]) Eg: [fib <~ [request: [2], reply-to: c2)]J 
_ cont - cont 
_ : | | 
Vv © Vv 
Eq: Ley <om [roply: 21 Est Leg <~ Irony: 110 
~~--cont------ ~-----cont--------- 
| | 
| | 
V V 
Eg: [+ <~~ [requess: [2 1], reply-te: c]] 
| 
cont 
| 
V 


Ey: [ce <«~ [reply: 3]] 


We will use the notation {\(p <= m) --> y|} to partially describe an activity which starts with an event of 
the form [p <«~ [request: m, reply-to: oI} and finishes with an event of the form [¢ <«~ [reply: y]]. 


All of the events shown in the above diagram are contained in one activity (which we will name a) of 
fib whose starting event is Ey and whose finishing event is Ey. Thus the activity @ is of the form 


{l(fib <= [4]) --> 3}. The diagram above shows two sub-activities of « which we will call 8 and y such 
that the following relationships hold. 


B: {I(fib <= 3) --> 2]} start(8) = Ep - finish(B) = Ey 
yy: {I(fib <= 2) -=> 1]} stari(y) = E3 finieh(y) = Es 


The activity 8 has events which are not shown in the above diagram. Some of these events are shown 
in the diagram below: 
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Eo: [fib <~~ [request: [3], reply-te: oJ 


cette eateries CONtw------- --------Ccont~---------- 
[ | 
| | 
V V 
Eg: [fib <~~ [request: (2), reply-to: ¢3]] «Eg: [fib <o~ [request: [1], reply-to: c4)] 
cont . . cont 
| | 
Vv ' . Vv 
E19: [eg <~ [reply: 1]] | Ey4: Deg <o~ (reply: 1]] 
, | | | | 
= | | | 
coco cont---- ~oeeeen--cont------ 
| | 
| | 
V V 
E12: [+ <«~ [request: [1 1], reply-to: ey] 
cont 
| 
V 


Eq: | KI <w~ [reply: 2] 
Thus we see that 8 in turn has sub-activities y’ and 6 such that 


y': {fib <= [2]) --> 1]} start(y') = Eg finish(y’) = E19 
3s {fib <= (1)) <-> 11} stert(3') = Eg  finish(8") = E44 


Notice that both y and y’ both satisfy the partial description {\(fib <# [2]) --> 1]} even though they are 
distinct activities which share no events in common. Uniquely identifying activities has the same 


problems as uniquely identifying objects and events: no finite local description will serve as a unique 
identification. 
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An actor‘ will be said to behave like a procedure if the following conditions hold for aff the histories 
of f: : : 


1: AN of the ieceuecgerds e's events in the history sre either of the form 
c. . (aw Se a  reply-to: ...]§ or of me form [... «~~ [reply:]]. 


2: If E is @ request of the form [[ ... <~ [request: ..., reply-te: c]] there there is at most one 
event E' i in which c is the target of E and such an E’ must be a reply to E. 


3: The activities of f are properly nested. LE. for eny two activities of { it-Is the case that dither 
Seen Ne enees, Comer eee eet ener ee ee ee ee eee 


An actor 1 wil be said to inehave like a function if it is order errr and behaves like a 
procedure. , 


| 
| X2 -- | Limits of Continuous Funct fonals 


_ The actor model of computation is based on axtomatizing the causal and incidental relations among 
computational events. The Scott-Strachey model of computation is based on the mathematical analysis 
of continuous function spaces. Superfictally these two models might seem to have little in common. In 
this section we will analyze the relationship between these models of computation. Our main result ts 
that if an actor behaves like a mathematical function then 4 is the limit of a continuous functiorial in 
the sense of Scott. This result follows from the law that each event has only finitely many immediate 
Successors, in the continuation orseriog and the law of finite chains between two events in the . 
continuation ofdering. 


Once ee we will make the discussion concrete by considering the behavior of an implementation of 
the Fibonacci function defined by the: re as 


(fib n) = 
qs : 
(n= 1) then 1 - 
(n = 2) then 1. 


“(n> 2) then ((fib (n - rt) + (fib (n ~ 2) 


Definition: Séedeee’s an actor { soneres like a | mathematical function end that <x y>€graph(f) and <x’ + yoegraphit 
Then <x’ y'> will be- said to be an immediate t-descendant of <x y> if 
there is some history of { whjch hes events E and E' et the form 
- Es [[f <o» [request: x, reply-to: ...J] 
E'’ [[f <o=, [request: x’, a a iti JJ 

such that E -act-> E’ 
and it is not thé case that there is an aver E of the form 
E: [[f <+~ (request: ..., reply-to: ..JJ , 

such that E -cont-> E -cant-> E’ . 
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For example <2 1> is an immediate fp-cecenaant of <3 2>. 


Definition: Suppose that <x y>€graphit) 
immediate-descendants;(<x y>) = {<x’ y'>] <x’ y"> is an immediate f-descendant of <x y>} 


immediate-descendants,:,,(<1 1>) = {} 
immediate-descendants;,,,(<2 1>) = {} 
immediate-descendants;;,, (<3 2>) = {<1 1> <2 1>} 
immediate-descendants;;,. (<5 5>) = {<3 2> <4 3>} 


Lemma: If an actor f behaves like a mathematical function and <x y>€graph(f) then 
immediate-descendants;(<x y>) is finite. 


Proof: Follows from the Law of Finitely Many Immediate Successors in the Activation Ordering. 


Definition: If G is a set of input-output pairs then 
Dy(G) = {<x y>| <x y>€graph(f) and immediste-descendants;(<x y>) ¢ G} 


Intuitively O,(G) is the set of all input-output pairs of graph(t) that can be computed “immediately” from 


the input-output pairs in G. For example we have the following results for our implementation of the 
fibonacci function 


Dein ({}) = {<1 1>°<2 1>} 

Dein (<1 1> <2. 1>}) = {<1 1> <2 1> <3 29} 

Dep ({<l 1> <2 2> <O 4>}) = {<1 1> <2 1> <3 2>} 

Dey ({<3 2> <4 3>}) = {<1 1> <2 1d <5 59} 

Lemma: If an actor f behaves like a mathematical function, then Dy is a continuous functional. 

Proof: From its definition D, is clearly monotonic. We will use N to denote the natural numbers [ie. the 


non-negative integers]. Suppose that {X|| iN} is a chain of sets of ordered pairs so that X; ¢ Xj44. To 
prove that Dy is continuous we shail prove that 


Vier 040%) = DelUjeny Xj) 
Clearly 
Vien OgXj) < OflUjeny X) 
by the monotonicity of Dy. To prove the set inclusion the other way around suppose 
<xy> € DlUreny Xj) | 
It follows from the definition of Dy that soe eae and 


immediate~descendants;(<x,y>) ¢ Uren Xj 
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Therefore there exists a natural number n such that inate deondantey (7) ¢X, since the 
immediate f-descendants of <x,y> are finite. Thus <&,y>€D,X%,,) and 


<x,y> < Vien Dy %;) 


Definition: A sequence <x; yj> such that each <x ypégraph(f) will be said to be a descending -chain if 
each <xi4q View isan smnmediate f-descendant of <x; y). 


Example: The f ollowing are descending fib-chains _ 


[<6 8> <4 3> <3 2> <1 1>] 
[<7 13> <5 5> <3 2> <2 1] 


Lemma: if < y>€graph(f) then there are only finitely many descending f-chains begining with <x y>. 


Proof: Follows from the fact that there are only finitely many events between two events of the form 
[Lf <«~ [request: x, reply-to: c]] and [c <~~ [reply: y]] in the continuation ordering. 


Definition: If <x y>€graph(f) then height(f,<x y>) will be defined as the maximum length of the descending 
f-chains beginning with <x y>. 


Lemma: If <x y>€graph(t) then <x yreD, height(t, cx yh) where D," is the mfold composition of Dy with 
itself. 


Theorem: If an actor f behaves like a mathematical function then D, is a continuous functional in the 
sense of Scott and graph(f) is the limit of Dy beginning with the empty graph {} ie. 


graphit) = Uren Oj!({}) 


where graph(f) is the set of input-output pairs of .. It immediately follows that init is the minimal 
fixed point of Dy since 


graph(t) = Dy(graphit)) 


The above theorem makes precise the physical basis for believing that the graph of every physically 
realizable mathematical function is the limit of a continuous functional: the Law of Finitely Many 
Immediate Successors and the Law of Finite Chains between two Events in the Continuation Ordering. 
As currently developed the Scott-Strachey theory does not account for the the properties of the arrival 
orderings of actors such as synchronization primitives and shared data bases. An interesting topic that 
is left open for future research is how the Scott-Strachey theory can be extended in a natural way to 
encompass the physical constraints imposed by the arrival orderings of actors. 
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SECTION XI_--- FUTURE WORK 


When we first began our investigation into message-passing system we developed the intuitively 
appealing idea of “actors” as agents which communicate by passing messages. This intuitive notion 
pr oved to be too naive a basis for precise technical work in the same way that the intuitive notion of a 
“set” as a collection of objects proved to be too naive a basis in mathematics. The solution has been the 
development of the axioms in this paper which are intended to serve as the first step in developing 
axioms which capture the intuitive notion of actors as agents which communicate by sending and 
receiving messages. 


There remains a great deal of work to be done in the development of the theory presented in this 
paper. The “completeness” of the axioms presented here needs to be intensively studied to determine if 
they can be significantly strengthened. 


A mathematical characterization of the models which satisfy the axioms needs to be developed. The 
characterization should include a description of a standard model obtained by a constructive method for 
enumerating all the computation histories of a system that satisfy the axioms in this paper. Eliot Moss 
and Henry Baker [50] have developed one such model which proves the consistency of the axioms in 
this paper as well as providing a standard model in which the axioms can be interpreted. 


We would like to apply the semantic theory developed in this paper in several directions. The 
semantics of programming languages for multi-processing problem solving languages such as KRL, 
OWL, PLASMA, SIMULA, SMALLTALK, AMORD, and the quantificational calculus need to be 
rigorously developed. In this way we hope to be able to make precise technical contributions to the 
“declarative-procedural” controversy. ! 


There are a number of questions concerned with how efficiently actor systems can be implemented on 
networks of machines. In terms of the physical transport of information there are several ways in 
which an event can be implemented. The information in the messenger can be physically transported to 
the target, the target can be transported to the messenger, or the two can rendezvous at some other 
_ location. Under differing circumstances any one of the above possibilities might be more efficient. For 
example if the target is a smal function which makes use of a large number of the extended 
acquaintances of the messenger then it is probably more efficient to transport the target to the 
messenger. On the other hand if the target is a large data base which is searched according to the 
directions of a small query in the messenger, then it is probably more efficient to transport the 
messenger to the target. Research is needed to develop dynamic mechanisms for deciding what 
information to transport for computations that are physically distributed on a network of machines. 
Hopefully some general mechanisms can be developed which, in practice, yield acceptable efficiency. 
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SECTION XII_--- CONOLUSION 


In this paper we have presented some faws that must be obeyed by the computations of communicating 
parallel processes. These laws are expressed in the language of first order set theory. The actor message 
passing model is based on axiomatizing the causal. and incidental relations between computational 
events where each event consists of receiving a message. An important advantage of the actor 
message-passing model is that specifications for actors can be expressed directly in terms of the events 
involving those actors. Our approach is different from the more usual one which is to postulate the 
existence and “fairness” of some underlying global “scheduler” [21] or “oracle” [22]. Partial orders 
provide a means for concentrating on the causal relations among event as opposed to time relationships 
that result from some arbitrary: interleaving. 


The development of histories in the actor model of computation as partial orders of events as a 
generalization of the previous development as sequences of events has proven to be very f ruitful. The 
partial orders ~act->, -arr->, for each order dependent actor x, -cent->, and -->, are all physically well 
grounded in the sense that if twa events are observed to be related in a,certain way in. some observation 
frame then they will be observed to be related in the same way in all observation frames, Each of these 
different orderings serves its own purpose in the model. The following table summarizes the partial 
orders which we have introduced to describe the histories of computations: 


-act-> activation causalily between events 


varr=>, arrival local time of arrival of messages sent to x 
--> combined genera! notion of one event preceding ancther . 
=cant=-> continuation nested activities 


Partial orders of histories have been used to develop specification and proof techniques for modular 
synchronization primitives [82,34] The machinery of partial orders of events provides the semantic 
glue needed to relate the specifications and implementations of communicating parallel processes. 


This paper has traced some of the important relationships between the actor message-passing model of 
computation and classical denotational, semantics. It has been proved that every actor which behaves 
like a mathematical function is the limit of a continuous functional. This result provides a physical 
basis for the treatment of continuity in the Scott-Strachey theory of computation. The actor 
message-passing model has important applications for the semantics of ara re parallel processes 
which will be explored in ere papers. 
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